topic Re: Group membership assignment via SAML using Azure AD in ArcGIS Enterprise Portal Questions

Group membership assignment via SAML using Azure AD

AnthonyRyanEQL — Sun, 31 Mar 2019 22:43:05 GMT

Hi there,

I am having trouble finding information about how to setup Azure AD to manage user membership via groups. We have the corporate AD groups & users syncing to Azure AD and we also have enterprise logins via IDP working too. Enable group memebership within the IDP setting has been enabled too.

A Portal group has been created with the enterprise group name filled out with the name of the corporate AD group that has been synced to Azure AD but with no luck with user membership.

Could someone please point me in the right direction.

Thanks

Re: Group membership assignment via SAML using Azure AD

JamesDiaz1 — Tue, 02 Apr 2019 02:15:34 GMT

Hey im also in the process of setting this up, so far i got the user to login to work using this guide Tutorial: Azure Active Directory integration with ArcGIS Enterprise | Microsoft Docs, but when i create a portal group with the enterprise group name the users cant see the content shared to the group. Hope the link helps.

Re: Group membership assignment via SAML using Azure AD

AnthonyRyanEQL — Tue, 02 Apr 2019 03:12:20 GMT

James,

Same here. Users logging in no problems but that portal group linkage is a mystery

Re: Group membership assignment via SAML using Azure AD

JamesDiaz1 — Tue, 02 Apr 2019 04:40:24 GMT

have you checked your saml response headers? ours are returning the azure ad enterprise group ID but still no dice.

Re: Group membership assignment via SAML using Azure AD

JamesDiaz1 — Tue, 02 Apr 2019 16:18:31 GMT

Hey Anthony just an update, on azure ad get the group object ID and add the enterprise group on portal, that seems to have done the trick on my end.

Re: Group membership assignment via SAML using Azure AD

AnthonyRyanEQL — Tue, 02 Apr 2019 22:54:16 GMT

James,

Thanks for the info. This is the part of the SAML response when I log in relating to groups.

I'm getting my Azure admin person to tell me what the names of the GUIDs are.

Re: Group membership assignment via SAML using Azure AD

AnthonyRyanEQL — Sun, 26 Apr 2020 23:51:22 GMT

The claims section in Azure AD was altered and now showing in the format of <domain>/<groupname> which works a treat.

Re: Group membership assignment via SAML using Azure AD

SatheeshSubramanian — Mon, 21 Sep 2020 03:09:16 GMT

Hi Anthony,

Could you please elaborate exactly where the changes are made in the Azure AD end to fix this issue?

We are also facing the same issue and trying to fix it.

Thanks,

Satheesh Subramanian

Re: Group membership assignment via SAML using Azure AD

AnthonyRyanEQL — Wed, 01 Oct 2025 05:40:57 GMT

Sorry about being 5 years late to reply. In the group claims section in Azure AD, we changed the Source attribute